Privacy Policy

Last updated July 12, 2026

Canada-first Privacy Policy for users worldwide — PIPEDA-focused core, plus rights sections for other regions (EEA/UK, U.S. states, and more). Have a lawyer review before treating it as final.

1. Introduction

This Privacy Policy explains how GearNet (“we,” “us”) collects, uses, shares, and protects personal information when you use gearnetapp.com and our mobile apps worldwide. We are based in Canada. This Policy is written to meet Canadian privacy expectations first (PIPEDA and similar provincial laws), and to work for users in other countries — with extra regional rights described below, in a layered style similar to large global platforms.

2. How to reach us

Privacy and support contact: kachurtaylor5@gmail.com. We respond to privacy requests within the time required by the laws that apply to you. Canadians may also contact the Office of the Privacy Commissioner of Canada (priv.gc.ca) or a provincial privacy commissioner.

3. Information you give us

Account and profile: email and/or phone, login credentials (via our auth provider), username, display name, avatar, cover image, bio, location text, interests, scene tags, referrals, and settings. Garage and Service Bench: vehicles (including optional VIN), mods, build logs, maintenance records and reminders, receipts. Social: posts, Pit Updates, comments, reactions, collections, bookmarks. Community: clubs, challenges, projects, dues notes, meets/events, RSVPs, check-ins, photos, convoy updates, map pins. Exchange: listings, prices, fitment, trade offers, meetup preferences, status updates. Chat: text, images, voice notes. Safety: reports, blocks, verification requests, and messages to us.

4. Information we collect automatically

Device and log data (app or browser type, IP-based approximate location, timestamps, diagnostics), push tokens, and usage data needed for feeds, search, security, and abuse prevention. If you allow location access, we may collect precise location for Near You, maps, check-ins, convoy sharing, or geotagged posts/listings. Place search may send your query to map/geocoding providers.

5. Vehicle and public data

VIN decode, recalls, and manuals tools may send vehicle details to third-party or government sources (including outside your country, such as NHTSA). We use that to answer your request. Always confirm safety recalls with official authorities where you live.

6. How we use information

We use personal information to: run and secure accounts; provide profiles, garages, feeds, clubs, meets, Exchange, chat, and Service Bench; personalize discovery; send notifications you allow or that are needed for the Service; moderate and keep the community safe; fix bugs and improve GearNet; and comply with law. We do not sell your personal information. If we want to use it for a new purpose, we will ask for consent where the law requires.

7. Consent and your choices

We rely on consent and other lawful bases allowed where you live. You can change privacy and notification settings, limit location access in your device settings, block or report users, and delete your account in Settings. You may withdraw optional consents (for example certain marketing messages or location features) by changing settings or emailing kachurtaylor5@gmail.com, subject to legal limits. Some features will not work without certain data.

8. How sharing works on GearNet

Other users see what your settings and the product allow — for example public or private profiles, whether location text or garage is shown, and who can message you. Posts, listings, and club/event content you publish are visible as those features work. Messages are visible to people in the conversation. We may process profile views or similar signals to operate the product.

9. Service providers and global transfers

We use companies that help us run GearNet, including Supabase (auth, database, storage, optional realtime), Vercel (hosting), Resend (email), Expo and web push, Sentry (errors), optional media hosts (such as Cloudinary), image processing, and map/place providers (OpenStreetMap/CARTO, Photon/Komoot, Nominatim). They may process data in Canada, the United States, the EU, or other countries. When information leaves your country, local laws there may apply (including government access laws). We use contracts and safeguards appropriate to the data. Using GearNet means you understand these transfers may happen.

10. Payments

We do not currently process card payments or hold marketplace funds. Club dues and ticket links are for convenience only. If we add paid products later, we will update this Policy and name any payment providers.

11. Retention

We keep personal information only as long as needed for the purposes above, or longer if the law requires (for example security, disputes, or tax). If you delete content or your account, we remove it from live systems, subject to backups and legal retention windows.

12. Security and breaches

We use safeguards suited to the sensitivity of the information (including encryption in transit and access controls). No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify affected people and regulators as Canadian and other applicable laws require.

13. Your rights — Canada (primary)

Under PIPEDA and similar provincial laws (including Alberta and B.C. PIPA and Québec Law 25 where they apply), you may request access to and correction of your personal information, withdraw consent for optional processing, and ask questions about our practices. Québec and other provinces may provide further rights. Email kachurtaylor5@gmail.com. You may complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.

14. Your rights — around the world

EEA, UK, and Switzerland: where GDPR or UK GDPR applies, we process data under bases such as contract, consent, legitimate interests, and legal obligation. You may have rights to access, rectify, erase, restrict, object, and portability, and to withdraw consent. You may complain to your local supervisory authority. You may also contact our privacy email above. United States: depending on your state (for example California), you may have rights to know, delete, correct, or opt out of certain sharing. We do not sell personal information as that term is commonly defined in U.S. state privacy laws. Other countries: you may have access, correction, deletion, or complaint rights under local law — contact kachurtaylor5@gmail.com and we will honour requests as required.

15. Children

GearNet is not directed to children under 13. We do not knowingly collect their personal information. If you think a child under 13 has an account, email kachurtaylor5@gmail.com and we will delete it. Teens under the age of majority should use GearNet with a parent or guardian as described in the Terms.

16. Marketing messages

Account and security messages may always be sent as needed. Optional digests and promotional alerts follow your settings. In Canada we follow CASL (consent and unsubscribe). In other regions we follow local anti-spam and e-marketing rules.

17. Changes

We may update this Policy and will revise the “Last updated” date. For material changes we will give additional notice when required. Continued use means you acknowledge the updated Policy where allowed; we will ask for new consent when the law requires it for a new purpose.

18. Contact

kachurtaylor5@gmail.com · Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca